Our internal analysis tool found a bug in Tether Gold contract on April 5th, which allows an attacker to transfer anyone’s XAUt (Tether Gold) token to a predefined address. The team received our report and said they had located this issue internally…

MetaDock is a simple-to-use, infinitely beneficial plugin that is free, ad-free, and open-source. It can seamlessly enhance 10 blockchain browsers including Etherscan, and after installation, you can see more useful information ahead of others, such as address label libraries, fund flow charts, and batch download codes for transaction analysis…

By MetaDock Team @ BlockSec Achievement MetaDock, as a niche web3 browser extension, has successfully gained its 6000th user today! Since its release, MetaDock has been loved by many users, including security researchers, founders and developers of DeFi projects, on-chain analysts, and other power users. Many of them provided positive and…

Phalcon supports the debugging of a transaction, a powerful feature that can significantly improve the analysis efficiency for complex transactions. In the following, we will use the transaction of the exploitation of the Euler protocol to illustrate this feature. Click the link for this transaction: https://phalcon.xyz/tx/eth/0xc310a0affe2169d1f6feec1c63dbc7f7c62a887fa48795d327d4d2da2d6b111d How to Enter the debug mode

EVM (Ethereum Virtual Machine) compatible blockchains are designed to be compatible with the Ethereum blockchain’s smart contract functionality, programming language (Solidity), and tooling ecosystem. During this process, the implementation of an EVM-compliant virtual machine is one of the key steps. However, during our research, we find that maintaining the compatibility…

On 2023–03–17 05:48:59 (UTC), BlockSec successfully blocked an attack attempt on ParaSpace (a top NFT lending protocol) and protected crypto assets worth $5M.

By BlockSec Recently, there has been a lot of attention on the “counter exploit” to move funds from MakerDao Vault using Oasis multisig. Meanwhile, we have received a couple of queries about whether BlockSec is the “whitehat” behind this operation since we were involved in the counter exploit to help…

By BlockSec DeFi hacks are still happening. For the stolen funds of the DeFi projects, it’s usually hard to recover them. Some projects negotiate with the hacker to offer a bounty and promise the drop of legal actions. It works sometimes but set up a bad example. It likes to…

By MetaSleuth Team @ BlockSec This blog will show how to use MetaSleuth (@MetaSleuth) to analyze a phishing attack. Involved addresses For better illustration, we show the involved addresses and their abbreviations in the following. 0x46fbe491614e1ab6623e505e5e031ebf321cb522: 0x46fb…b522 — possible anonymous exchange (exchange without KYC requirement) 0xc40a8a6763969e88c8bf58a6e7a5adc61b8ebe11: 0xc40a…be11 — attacker-controlled address